DOJ's Enforcement Shift: What Defense Contractors and Businesses Must Know in 2026

# DOJ Enforcement Surge: What You Need to Know This week, the Department of Justice is signaling a dramatic shift in its enforcement priorities, and the implications are significant for businesses, contractors, and everyday Americans. The most pressing headline involves the DOJ's aggressive new stance on cybersecurity violations among defense contractors, marking what experts are calling a preview of a more muscular enforcement landscape throughout 2026. According to Federal News Network, two major cases closed out last year that have contractors on high alert. The first involved a DFARS-driven settlement addressing deficient cybersecurity practices, while the second brought criminal charges related to FedRAMP misrepresentations. Andrew Liebler and Lance Taubin from the law firm Alston and Bird described these cases as signaling a more aggressive and varied enforcement approach. What makes this particularly urgent is that CMMC, the Cybersecurity Maturity Model Certification, is coming into effect with a phased timeline over the coming years, creating more requirements and opportunities for enforcement actions. But cybersecurity isn't the only area heating up. According to Cleary Gottlieb, the DOJ Criminal Division announced major policy shifts in May 2025 that are now taking full effect. The agency is emphasizing focus, fairness, and efficiency while reshaping its white-collar enforcement strategy. The Corporate Enforcement and Voluntary Self-Disclosure Policy has been significantly revised, and companies that voluntarily self-disclose misconduct, cooperate fully, and remediate appropriately will now receive declination absent aggravating circumstances, rather than just a presumption of one. This shift creates both opportunity and responsibility for businesses to come forward. Meanwhile, the False Claims Act enforcement machine continues running at full throttle. According to Winston & Strawn's analysis of DOJ data, settlements and judgments exceeded 6.8 billion dollars in fiscal year 2025, the highest annual recovery in the statute's history. Whistleblowers filed nearly 1,300 qui tam actions, and the DOJ opened 401 new investigations. Recent cases show particular focus on Paycheck Protection Program loans, with a January judgment against a California rehabilitation center resulting in over 1.5 million dollars in damages, and a February settlement with a fashion company for 3.2 million dollars. For listeners in government contracting, the message is clear: strengthen your cybersecurity posture now and consider voluntary disclosure if you've had compliance gaps. For businesses across all sectors, robust internal compliance programs and transparent self-reporting can significantly reduce exposure. The DOJ continues expanding its enforcement reach while creating pathways for cooperation. The next months will reveal whether this balanced approach actually takes hold or whether enforcement intensity continues climbing. Thank you for tuning in. This content was created in partnership and with the help of Artificial Intelligence AI.